Analysis
- max time kernel
149s - max time network
156s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/06/2026, 11:52
Static task
static1
Behavioral task
behavioral1
Sample
tmpujsghlcg.7z
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpujsghlcg.7z
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpujsghlcg.7z
Resource
win11-20260513-en
3 signatures
150 seconds
General
- Target tmpujsghlcg.7z
- Size 1.2MB
- Sample260602-n13leact3v
- SHA256 d3dc0c96710576b12e28c77fe242f403688e3901fdf107eaa34e95551d555026
- MD5 5346224f0bf4bf4db29483f22172f5a6
- SHA1 55cc57f2a5214925b8cbe9b4593d79ecc815353a
- SHA512 229e6ca778d9783623e6ee8d9e826a237af84fdc30b02a1a7003dc9f3ed2b2261a7ffebacc95ece94bb3e3918f85b174ec794df95ad00b2b24e9ceaba844310f
- SSDEEP 24576:T+Aq+C/kJjp+Pu5evq106A9p0cr25Q359QsquMxewWl1P6Egrf:T++C/kJpwu5bA9GvQPQvuMxeRArf
- TLSH T1F75533AE5F974ED6A5E08E2AFFA16C5A5B9B30E3B122073161176C34F38670005C7A77
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3260 7zFM.exe - Suspicious use of AdjustPrivilegeToken 2 IoCs
description pid Process Token: SeRestorePrivilege 3260 7zFM.exe Token: 35 3260 7zFM.exe - Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 3260 7zFM.exe